CVE-2025-12929

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.331649Permissions Required, VDB Entry
• https://vuldb.com/?id.331649Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.681746Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product
• https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.mdExploit, Third Party Advisory

Published

Nov 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12923A vulnerability was determined in liweiyi ChestnutCMS up to …4.9
• CVE-2025-12924A vulnerability was identified in rymcu forest up to de53ce7…6.5
• CVE-2025-12925A security flaw has been discovered in rymcu forest up to de…9.8
• CVE-2025-12926A weakness has been identified in SourceCodester Farm Manage…8.8
• CVE-2025-12927A security vulnerability has been detected in DedeBIZ up to …7.2
• CVE-2025-12928A vulnerability was detected in code-projects Online Job Sea…9.8
• CVE-2025-1293Hermes versions up to 0.4.0 improperly validated the JWT pro…8.2
• CVE-2025-12930A vulnerability has been found in SourceCodester Food Orderi…9.8
• CVE-2025-12931A vulnerability was found in SourceCodester Food Ordering Sy…9.8
• CVE-2025-12932A vulnerability was determined in SourceCodester Baby Care S…9.8
• CVE-2025-12933A vulnerability was identified in SourceCodester Baby Care S…9.8
• CVE-2025-12934The Beaver Builder – WordPress Page Builder plugin for WordP…8.1